[Libreoffice-qa] Writer password protected section is editable

Michael Stahl mstahl at redhat.com
Fri Oct 2 08:14:46 PDT 2015


On 02.10.2015 15:40, Marina Latini wrote:
> Hi all,
> can someone help me to correctly triage this report?
> https://bugs.documentfoundation.org/show_bug.cgi?id=94697
> 
> I would add the keyword "security". It's correct?

i guess the most important case where a password related bug is security
relevant is in case of encrypted documents, where the document is not
readable at all and just a sequence of random numbers without the password.

the various password-to-modify features are not a security feature at
all, since any skilled user can just edit the XML file in a text editor
to remove the "password protection" anyway.

if one's paying customers require such features and complain about the
bug it's still worth fixing of course ;)



More information about the Libreoffice-qa mailing list